Windows Forum

Ask something
Discussion Locked

Last Login for Machine Accounts

0 helpful
7 replies

by magetower 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a utility that will show me the last login times for machine accounts? I need to be able to weed out the unused machine accounts from the domain.

7 replies

by pan 13 x

if you are using dhcp for ip addressing. You can go into the dchp manager and view the lease date. Only the current leases are active computers.

by magetower

The problem with this method is that the lease period is too short to make this reliable. I don't want to remove systems that have been off-line longer than the lease time but are still valid systems. (Observing over a period of time is not an option.) Thanx.

by duskos

Go to Administrative Tools, User Manager for Domains.
On Policies menu click Audit.
Click Audit These Events.
Click Logon and Logoff Success and Failure.
All Logon requests will be recorded in your Event Log in Security log.
You can view your Event Logs using Event Viewer from Administrative Tools.
You can also use your Event Viewer to export your events to comma separated value (CSV) file. This file can be opened and analysed with Excel.

by magetower

The problem with this method is the number of DCs in the domain. Besides I'm talking about machine accounts not user accounts. The event log is too clodgy an avenue for what I'm looking for. Thanx.

by bbrown

DumpAcl from SomarSoft can provide a listing of all workstations and server accounts that are members. With this list, you can use numerous tools to "ping" the names during the day to determine if still live or old names.

Bobby

by magetower

I get the same information using the resource kit tools. What I need is the last login time as well as the names.

This discussion is closed to new replies.